Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
File: 0BA74CC46EF111EEB2AAC928C4F9AE02.roa (raw, json)
Hash identifier: zuFip8oEYfOm5PLMMV75zilYnKBtyewP+hKtm+oSeLM=
Subject key identifier: DB:C9:19:81:BB:E9:C1:D2:2F:09:18:78:D2:7F:4E:CE:C2:40:7F:FA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4AAA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
Signing time: Sat 03 May 2025 02:14:38 +0000
ROA not before: Sat 03 May 2025 02:14:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38733
IP address blocks: 42.96.33.0/24 maxlen: 24
42.96.36.0/23 maxlen: 24
42.96.62.0/24 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.244.0/24 maxlen: 24
103.82.32.0/22 maxlen: 24
103.117.196.0/23 maxlen: 23
103.188.20.0/23 maxlen: 23
103.190.38.0/23 maxlen: 24
115.165.161.0/24 maxlen: 24
115.165.162.0/23 maxlen: 24
115.165.164.0/23 maxlen: 24
115.165.167.0/24 maxlen: 24
119.82.133.0/24 maxlen: 24
124.158.8.0/21 maxlen: 24
124.158.8.0/24 maxlen: 24
124.158.9.0/24 maxlen: 24
124.158.10.0/24 maxlen: 24
124.158.11.0/24 maxlen: 24
124.158.12.0/24 maxlen: 24
124.158.13.0/24 maxlen: 24
124.158.15.0/24 maxlen: 24
203.167.12.0/22 maxlen: 24
203.205.15.0/24 maxlen: 24
2400:8c60::/48 maxlen: 48
2402:5300:4020::/48 maxlen: 48
2402:5300:4021::/48 maxlen: 48
2402:5300:4e00::/40 maxlen: 48
2402:5300:7100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 14:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19114 (0x4aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 3 02:14:38 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68157c0e-b300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:e3:8e:02:74:88:7d:70:5b:ea:4d:0c:98:
90:e0:01:ee:16:70:82:48:25:63:9a:9a:cc:c3:cc:
89:9b:1d:a3:1b:07:ce:67:1d:94:df:dc:d3:5c:4c:
60:3c:40:f4:87:0b:3e:24:cc:29:fc:f0:f4:16:53:
e0:ad:44:54:94:b6:11:9b:25:be:cc:50:2c:3e:6a:
39:dd:ad:aa:de:a6:77:68:43:cb:5c:a2:d0:1e:63:
19:df:28:39:2b:8a:21:2d:1d:e4:16:27:93:7a:90:
66:4b:68:8f:a6:b8:da:85:ca:38:b6:54:52:b0:e7:
e1:52:ef:2e:31:fc:b1:35:f6:c1:73:66:2d:84:10:
21:20:35:17:1b:0f:ab:7f:c6:87:f1:d6:e4:1a:c2:
bd:a8:dc:b2:19:3d:b3:68:8d:69:28:e8:99:d2:ab:
e1:28:90:fd:a5:91:4b:a2:02:20:01:ef:f9:bd:48:
9b:9a:74:2f:83:6b:97:4d:1f:fd:1c:42:32:15:34:
6c:e0:9f:ee:22:43:8d:5d:76:e8:6b:c8:b0:6c:8f:
46:3c:5d:43:a8:59:de:2a:df:1c:55:14:1f:ef:cd:
61:af:52:e8:b9:ef:57:5c:80:8d:3f:11:77:ea:f6:
51:20:d0:0c:37:22:85:ea:30:5d:b9:ec:59:3f:fe:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:19:81:BB:E9:C1:D2:2F:09:18:78:D2:7F:4E:CE:C2:40:7F:FA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0BA74CC46EF111EEB2AAC928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.33.0/24
42.96.36.0/23
42.96.62.0/23
45.122.244.0/24
103.82.32.0/22
103.117.196.0/23
103.188.20.0/23
103.190.38.0/23
115.165.161.0-115.165.165.255
115.165.167.0/24
119.82.133.0/24
124.158.8.0/21
203.167.12.0/22
203.205.15.0/24
IPv6:
2400:8c60::/48
2402:5300:4020::/47
2402:5300:4e00::/40
2402:5300:7100::/40
Signature Algorithm: sha256WithRSAEncryption
75:0c:6e:e0:5a:05:a2:ad:04:4e:12:b1:b3:fd:d3:ad:ce:d9:
64:4d:bf:b5:45:40:66:bc:33:22:f0:7f:40:d2:27:c5:53:40:
5f:3b:25:98:05:5e:35:20:1d:01:85:62:cc:38:e8:f0:ac:1b:
8a:59:21:23:e1:f9:ff:ed:ae:52:c1:90:1c:94:1c:5b:8c:11:
64:93:f7:05:0a:5c:11:b3:5c:6a:51:55:80:0f:23:93:e1:e2:
a1:a3:31:78:57:07:cf:df:2f:82:bf:86:e9:b6:c6:3b:7b:14:
a3:7c:d2:3e:6d:b9:a1:d3:d6:b0:59:28:f8:26:5f:6e:08:33:
d4:a2:ba:97:1c:91:b0:f0:fa:7b:18:20:4e:c2:1a:f9:d7:de:
76:cb:fa:3a:04:c2:16:3d:4d:82:9a:9e:c1:76:cd:a3:bf:d9:
54:5f:79:2d:6c:02:b4:89:63:df:7e:60:7d:7c:9e:0f:c4:21:
5b:b7:a4:97:ff:89:b7:44:6b:6a:3e:33:60:6c:d7:b7:e9:bb:
b3:bb:8c:dd:c7:21:65:7d:44:1d:df:ff:3a:e7:d4:8a:8a:56:
94:5d:d3:d0:a5:cb:9c:a8:72:26:95:45:d3:bf:a2:07:ba:b5:
b1:47:93:ac:e2:69:16:c0:af:e7:d6:f4:c0:ac:30:be:5b:f9:
2d:03:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:53 2025 by rpki-client